This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer File: d7tRRrULW8gaNXR6K75lKqC3Fnw.cer (raw, json) Hash identifier: qQXXCNsgqFskpYHX7GZ4sHIy53dFswE8WBdLisuzkPk= Subject key identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38EA2D3685E0D6DEE57A380B9D95B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198450 IP: 91.224.244.0/23 IP: 2001:67c:2134::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ea:2d:36:85:e0:d6:de:e5:7a:38:0b:9d:95:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:7c:72:90:51:b7:09:21:2b:0f:f3:85:1f: 72:a3:7c:80:87:dd:bb:19:19:80:48:86:3f:44:bd: 40:5b:09:ca:5b:c2:0e:48:d5:86:2c:db:9d:60:8f: e7:fd:fc:7b:3c:67:ba:4e:f0:53:8a:a9:12:a7:1b: bc:4f:ed:8b:cb:f1:4e:11:a1:34:62:9a:4c:32:fc: 05:a4:33:83:66:78:39:3c:1d:39:b4:61:8d:24:83: 0c:a1:bb:2f:33:b4:dd:be:35:11:75:7c:9b:3c:85: 71:7e:6e:ac:c5:20:e8:d0:74:48:a4:8d:d2:84:a5: 32:36:07:8f:0f:33:17:56:18:b7:5f:f7:f8:2e:d4: 5e:fa:f3:2c:95:8a:2d:87:d9:4d:23:6a:d1:a1:b9: e9:ce:fd:75:ba:f6:24:90:d3:05:49:96:5d:05:0a: 4d:6c:6e:25:01:cc:0a:cb:7e:14:ee:40:86:59:73: 94:e0:66:7b:12:e1:39:fd:39:92:fa:6f:11:55:69: d8:e2:56:3c:6b:6f:dc:e4:3d:2c:c2:ac:09:04:2f: 79:64:fb:a6:be:d2:0d:ed:37:cf:1f:f1:0b:f9:6c: 36:ba:c7:73:ee:95:ae:62:f5:3b:e6:b4:9c:2a:69: da:ed:3f:28:fc:5f:ca:4d:c7:0f:10:20:1d:0e:50: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.244.0/23 IPv6: 2001:67c:2134::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198450 Signature Algorithm: sha256WithRSAEncryption 4a:02:55:bd:00:65:4a:85:23:38:ad:c5:18:a5:43:39:37:08: ad:f7:28:e8:4d:6f:c5:0c:09:ec:25:03:ec:6f:6c:52:9e:f4: d3:7b:60:fd:03:5c:10:4b:cb:12:e5:85:3c:08:22:c1:dc:22: db:1b:f7:7b:b8:b9:9f:2f:81:6a:39:f7:9a:71:69:b1:82:81: b4:17:a6:4b:cb:21:c7:9a:2c:58:6d:37:c3:57:e5:76:10:cd: 9e:5d:0a:04:78:a2:2a:10:20:2d:34:bb:92:fd:66:c5:e6:78: 55:2c:57:70:01:c5:2a:5d:e6:1c:0b:9b:12:7b:ca:83:bd:18: 1c:13:94:7a:de:05:cf:a6:52:64:4f:de:d3:99:d7:32:15:cf: b8:f4:92:4d:31:4c:ec:3c:3c:2d:66:56:aa:25:fa:96:8b:92: 2c:e6:e2:b1:42:f2:9e:ab:59:65:1e:af:10:1e:19:3a:50:15: 16:7f:8b:61:87:18:91:16:30:d2:f0:b1:bf:e0:2d:1e:63:e4: 3d:15:5e:81:48:5b:85:66:62:71:d9:f1:fe:2c:26:74:ba:bb: c7:e5:c2:f8:42:ec:0c:8d:6a:1c:ef:a1:54:87:3f:6b:bf:60: c8:43:87:bf:f7:3c:74:e3:4f:96:56:d5:90:c6:4d:d0:01:a0: 6d:80:b4:fc -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt+OOotNoXg1t7lejgLnZW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2JiNTE0NmI1MGI1YmM4MWEzNTc0N2EyYmJlNjUyYWEwYjcxNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbl8cpBRtwkhKw/zhR9yo3yAh927 GRmASIY/RL1AWwnKW8IOSNWGLNudYI/n/fx7PGe6TvBTiqkSpxu8T+2Ly/FOEaE0 YppMMvwFpDODZng5PB05tGGNJIMMobsvM7TdvjURdXybPIVxfm6sxSDo0HRIpI3S hKUyNgePDzMXVhi3X/f4LtRe+vMslYoth9lNI2rRobnpzv11uvYkkNMFSZZdBQpN bG4lAcwKy34U7kCGWXOU4GZ7EuE5/TmS+m8RVWnY4lY8a2/c5D0swqwJBC95ZPum vtIN7TfPH/EL+Ww2usdz7pWuYvU75rScKmna7T8o/F/KTccPECAdDlDcHQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFHe7UUa1C1vIGjV0eiu+ZSqgtxZ8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzYxOTlk NC0zMjYxLTRlMGEtYWI0Ni1mMDg3ZTRmODVlNTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvNjE5OWQ0 LTMyNjEtNGUwYS1hYjQ2LWYwODdlNGY4NWU1MC8xL2Q3dFJSclVMVzhnYU5YUjZL NzVsS3FDM0Zudy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBW+D0MA8EAgACMAkDBwAgAQZ8ITQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwcyMA0GCSqGSIb3DQEBCwUAA4IBAQBKAlW9AGVK hSM4rcUYpUM5Nwit9yjoTW/FDAnsJQPsb2xSnvTTe2D9A1wQS8sS5YU8CCLB3CLb G/d7uLmfL4FqOfeacWmxgoG0F6ZLyyHHmixYbTfDV+V2EM2eXQoEeKIqECAtNLuS /WbF5nhVLFdwAcUqXeYcC5sSe8qDvRgcE5R63gXPplJkT97TmdcyFc+49JJNMUzs PDwtZlaqJfqWi5Is5uKxQvKeq1llHq8QHhk6UBUWf4thhxiRFjDS8LG/4C0eY+Q9 FV6BSFuFZmJx2fH+LCZ0urvH5cL4QuwMjWoc76FUhz9rv2DIQ4e/9zx040+WVtWQ xk3QAaBtgLT8 -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:55 2026 by rpki-client